{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,16]],"date-time":"2026-07-16T06:18:07Z","timestamp":1784182687437,"version":"3.55.0"},"publisher-location":"Cham","reference-count":49,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783319415390","type":"print"},{"value":"9783319415406","type":"electronic"}],"license":[{"start":{"date-parts":[[2016,1,1]],"date-time":"2016-01-01T00:00:00Z","timestamp":1451606400000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2016,1,1]],"date-time":"2016-01-01T00:00:00Z","timestamp":1451606400000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2016]]},"DOI":"10.1007\/978-3-319-41540-6_2","type":"book-chapter","created":{"date-parts":[[2016,7,12]],"date-time":"2016-07-12T09:34:07Z","timestamp":1468316047000},"page":"23-41","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":13,"title":["Investigating Safety of a Radiotherapy Machine Using System Models with Pluggable Checkers"],"prefix":"10.1007","author":[{"given":"Stuart","family":"Pernsteiner","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Calvin","family":"Loncaric","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Emina","family":"Torlak","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zachary","family":"Tatlock","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xi","family":"Wang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Michael D.","family":"Ernst","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jonathan","family":"Jacky","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2016,7,13]]},"reference":[{"key":"2_CR1","unstructured":"Alloy: a language and tool for relational models (2014). \n                      http:\/\/alloy.mit.edu\/alloy\/"},{"key":"2_CR2","unstructured":"Java PathFinder (2015). \n                      http:\/\/babelfish.arc.nasa.gov\/trac\/jpf"},{"key":"2_CR3","unstructured":"Safety case for CNTS prescription safety, August 2015. \n                      http:\/\/neutrons.uwplse.org"},{"key":"2_CR4","doi-asserted-by":"crossref","unstructured":"Babic, D., Hu, A.J.: Calysto: scalable and precise extended static checking. In: ICSE (2008)","DOI":"10.1145\/1368088.1368118"},{"key":"2_CR5","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"49","DOI":"10.1007\/978-3-540-30569-9_3","volume-title":"Construction and Analysis of Safe, Secure, and Interoperable Smart Devices","author":"M Barnett","year":"2005","unstructured":"Barnett, M., Rustan, M., Leino, K., Schulte, W.: The Spec# programming system: an overview. In: Barthe, G., Burdy, L., Huisman, M., Lanet, J.-L., Muntean, T. (eds.) CASSIS 2004. LNCS, vol. 3362, pp. 49\u201369. Springer, Heidelberg (2005)"},{"key":"2_CR6","unstructured":"Beringer, L., Petcher, A., Ye, K.Q., Appel, A.W.: Verified correctness and security of openSSL HMAC. In: 24th USENIX Security Symposium (USENIX Security 2015), Washington, D.C., pp. 207\u2013221 (2015). USENIX Association. \n                      https:\/\/www.usenix.org\/conference\/usenixsecurity15\/technical-sessions\/presentation\/beringer\n                      \n                    . ISBN:978-1-931971-232"},{"key":"2_CR7","unstructured":"Cadar, C., Dunbar, D., Engler, D.: KLEE: unassisted and automatic generation of high-coverage tests for complex systems programs. In: Proceedings of the 8th Symposium on Operating Systems Designand Implementation (OSDI), San Diego, CA, pp. 209\u2013224, December 2008"},{"key":"2_CR8","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"168","DOI":"10.1007\/978-3-540-24730-2_15","volume-title":"Tools and Algorithms for the Construction and Analysis of Systems","author":"E Clarke","year":"2004","unstructured":"Clarke, E., Kroning, D., Lerda, F.: A tool for checking ANSI-C programs. In: Jensen, K., Podelski, A. (eds.) TACAS 2004. LNCS, vol. 2988, pp. 168\u2013176. Springer, Heidelberg (2004)"},{"key":"2_CR9","unstructured":"Coq development team. Coq Reference Manual, Version 8.4pl5. INRIA, October 2014. \n                      http:\/\/coq.inria.fr\/distrib\/current\/refman\/"},{"key":"2_CR10","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"275","DOI":"10.1007\/978-3-642-35873-9_18","volume-title":"Verification, Model Checking, and Abstract Interpretation","author":"S Cruanes","year":"2013","unstructured":"Cruanes, S., Hamon, G., Owre, S., Shankar, N.: Tool integration with the evidential tool bus. In: Giacobazzi, R., Berdine, J., Mastroeni, I. (eds.) VMCAI 2013. LNCS, vol. 7737, pp. 275\u2013294. Springer, Heidelberg (2013)"},{"key":"2_CR11","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"337","DOI":"10.1007\/978-3-540-78800-3_24","volume-title":"Tools and Algorithms for the Construction and Analysis of Systems","author":"L de Moura","year":"2008","unstructured":"de Moura, L., Bj\u00f8rner, N.S.: Z3: an efficient SMT solver. In: Ramakrishnan, C.R., Rehof, J. (eds.) TACAS 2008. LNCS, vol. 4963, pp. 337\u2013340. Springer, Heidelberg (2008)"},{"key":"2_CR12","doi-asserted-by":"publisher","unstructured":"Denney, E., Pai, G.: Evidence arguments for using formal methods in software certification. In: 2013 IEEE International Symposium on Software Reliability Engineering Workshops (ISSREW), pp. 375\u2013380, November 2013. doi:\n                      10.1109\/ISSREW.2013.6688924","DOI":"10.1109\/ISSREW.2013.6688924"},{"key":"2_CR13","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"8","DOI":"10.1007\/978-3-642-33675-1_2","volume-title":"Computer Safety, Reliability, and Security","author":"E Denney","year":"2012","unstructured":"Denney, E., Pai, G., Pohl, J.: AdvoCATE: an assurance case automation toolset. In: Ortmeier, F., Daniel, P. (eds.) SAFECOMP Workshops 2012. LNCS, vol. 7613, pp. 8\u201321. Springer, Heidelberg (2012). doi:\n                      10.1007\/978-3-642-33675-1_2"},{"key":"2_CR14","unstructured":"Dependability Research Group. Safety cases repository, February 2006. \n                      http:\/\/dependability.cs.virginia.edu\/info\/Safety_Cases:Repository"},{"key":"2_CR15","doi-asserted-by":"crossref","unstructured":"Dolby, J., Vaziri, M., Tip, F.: Finding bugs efficiently with a SAT solver. In: FSE (2007)","DOI":"10.1145\/1287624.1287653"},{"key":"2_CR16","unstructured":"EPICS. CalcOut Release Notes. \n                      http:\/\/www.aps.anl.gov\/bcda\/synApps\/calc\/calcReleaseNotes.html"},{"key":"2_CR17","unstructured":"EPICS. \n                      http:\/\/www.aps.anl.gov\/epics\/"},{"key":"2_CR18","unstructured":"Ernst, M.D., Grossman, D., Jacky, J., Loncaric, C., Pernsteiner, S., Tatlock, Z., Torlak, E., Wang, X.: Toward a dependability case language and workflow for a radiation therapy system. In: Summit on Advances in Programming Languages (SNAPL) (2015)"},{"key":"2_CR19","unstructured":"Gacek, A., Backes, J., Cofer, D.D., Slind, K., Whalen, M.: Resolute: an assurance case language for architecture models (2014). CoRR, abs\/1409.4629. \n                      http:\/\/arxiv.org\/abs\/1409.4629"},{"key":"2_CR20","unstructured":"Galeotti, J.P.: Software verification using alloy. Ph.D. thesis, University of Buenos Aires (2010)"},{"key":"2_CR21","unstructured":"Greenwell, W.S., Knight, J.C., Holloway, C.M., Pease, J.J.: A taxonomy of fallacies in system safety arguments. In: International System Safety Conference (2006)"},{"key":"2_CR22","doi-asserted-by":"publisher","unstructured":"Hawblitzel, C., Howell, J., Kapritsos, M., Lorch, J.R., Parno, B., Roberts, M.L., Setty, S., Zill, B.: Ironfleet: proving practical distributed systems correct. In: Proceedings of the 25th Symposium on Operating Systems Principles, SOSP 2015, pp. 1\u201317. ACM, New York (2015). doi:\n                      10.1145\/2815400.2815428\n                      \n                    , ISBN:978-1-4503-3834-9","DOI":"10.1145\/2815400.2815428"},{"issue":"6","key":"2_CR23","doi-asserted-by":"publisher","first-page":"95","DOI":"10.1109\/MC.2006.212","volume":"39","author":"GJ Holzmann","year":"2006","unstructured":"Holzmann, G.J.: The power of 10: rules for developing safety-critical code. Computer 39(6), 95\u201397 (2006). doi:\n                      10.1109\/MC.2006.212\n                      \n                    . ISSN:0018-9162","journal-title":"Computer"},{"issue":"2","key":"2_CR24","doi-asserted-by":"publisher","first-page":"64","DOI":"10.1145\/2560217.2560218","volume":"57","author":"GJ Holzmann","year":"2014","unstructured":"Holzmann, G.J.: Mars code. Commun. ACM 57(2), 64\u201373 (2014). doi:\n                      10.1145\/2560217.2560218\n                      \n                    . ISSN:0001-0782","journal-title":"Commun. ACM"},{"issue":"4","key":"2_CR25","doi-asserted-by":"publisher","first-page":"78","DOI":"10.1145\/1498765.1498787","volume":"52","author":"D Jackson","year":"2009","unstructured":"Jackson, D.: A direct path to dependable software. Commun. ACM 52(4), 78\u201388 (2009)","journal-title":"Commun. ACM"},{"key":"2_CR26","volume-title":"Software Abstractions: Logic, Language, and Analysis","author":"D Jackson","year":"2012","unstructured":"Jackson, D.: Software Abstractions: Logic, Language, and Analysis. MIT Press, Cambridge (2012)"},{"key":"2_CR27","unstructured":"Jackson, D., Kang, E.: Property-part diagrams: a dependence notation for software systems. Technical report, Massachusetts Institute of Technology (2009). \n                      http:\/\/hdl.handle.net\/1721.1\/61343"},{"key":"2_CR28","volume-title":"Software for Dependable Systems: Sufficient Evidence?","author":"D Jackson","year":"2007","unstructured":"Jackson, D., Thomas, M.: Software for Dependable Systems: Sufficient Evidence?. National Academy Press, Washington, D.C. (2007). ISBN:0309103940, 9780309103947"},{"key":"2_CR29","unstructured":"Jacky, J.: The Clinical Neutron Therapy System. \n                      http:\/\/staff.washington.edu\/jon\/cnts\/index.html"},{"key":"2_CR30","doi-asserted-by":"publisher","first-page":"68","DOI":"10.1007\/978-3-642-59758-9_25","volume-title":"The Use of Computers in Radiation Therapy","author":"J Jacky","year":"2000","unstructured":"Jacky, J.: Formal safety analysis of the control program for a radiation therapy machine. In: Schlegel, W., Bortfeld, T. (eds.) The Use of Computers in Radiation Therapy, pp. 68\u201370. Springer, Heidelberg (2000)"},{"key":"2_CR31","unstructured":"Jacky, J.: EPICS-based control system for a radiation therapy machine. In: International Conference on Accelerator and Large Experimental Physics Control Systems (ICALEPCS) (2013)"},{"key":"2_CR32","unstructured":"Jacky, J., Risler, R.: Clinical neutron therapy system therapist\u2019s guide. Technical report 99\u201307-01, University of Washington, Department of Radiation Oncology (2002)"},{"key":"2_CR33","unstructured":"Jacky, J., Risler, R.: Clinical neutron therapy system reference manual. Technical report 99\u201310-01, University of Washington, Department of Radiation Oncology (2002)"},{"key":"2_CR34","unstructured":"Jacky, J., Risler, R., Kalet, I., Wootton, P.: Clinical neutron therapy system control system specification part I. Technical report 90\u201312-01, University of Washington, Department of Radiation Oncology (1990)"},{"key":"2_CR35","unstructured":"Jacky, J., Risler, R., Reid, D., Emery, R., Unger, J., Patrick, M.: A control system for a radiation therapy machine. Technical report 2001\u201305-01, University of Washington, Department of Radiation Oncology (2001)"},{"key":"2_CR36","volume-title":"IEC 61131\u20133: Programming Industrial Automation Systems: Concepts and Programming Languages, Requirements for Programming Systems Decision-Making Aids","author":"KH John","year":"2010","unstructured":"John, K.H., Tiegelkamp, M.: IEC 61131\u20133: Programming Industrial Automation Systems: Concepts and Programming Languages, Requirements for Programming Systems Decision-Making Aids, 2nd edn. Springer Publishing Company, Incorporated, New York (2010). ISBN:3642120148, 9783642120145","edition":"2"},{"key":"2_CR37","unstructured":"Kelly, T., Weaver, R.: The goal structuring notation - a safety argument notation. In: Proceedings of the Dependable Systems and Networks 2004 Workshop on Assurance Cases, July 2004"},{"key":"2_CR38","volume-title":"Handbook of Software Reliability Engineering","year":"1996","unstructured":"Lyu, M.R. (ed.): Handbook of Software Reliability Engineering. McGraw-Hill Inc., Hightstown (1996)"},{"key":"2_CR39","doi-asserted-by":"crossref","unstructured":"Near, J.P., Milicevic, A., Kang, E., Jackson, D.: A lightweight code analysis and its role in evaluation of a dependability case. In: Proceedings of the 33rd International Conference of Computer Safety, Reliability and Security, Waikiki, Honolulu, HI, pp. 31\u201340, May 2011","DOI":"10.1145\/1985793.1985799"},{"key":"2_CR40","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"crossref","DOI":"10.1007\/3-540-45949-9","volume-title":"Isabelle\/HOL \u2013 A Proof Assistant for Higher-Order Logic","author":"T Nipkow","year":"2002","unstructured":"Nipkow, T., Paulson, L.C., Wenzel, M.: Isabelle\/HOL \u2013 A Proof Assistant for Higher-Order Logic. LNCS, vol. 2283. Springer, Heidelberg (2002)"},{"key":"2_CR41","series-title":"Lecture Notes in Computer Science(Lecture Notes in Artificial Intelligence)","first-page":"748","volume-title":"Automated Deduction - CADE-11","author":"S Owre","year":"1992","unstructured":"Owre, S., Rushby, J.M., Shankar, N.: PVS: a prototype verification system. In: Kapur, D. (ed.) CADE 1992. LNCS(LNAI), vol. 607, pp. 748\u2013752. Springer, Heidelberg (1992)"},{"key":"2_CR42","doi-asserted-by":"crossref","unstructured":"Rushby, J.: Formalism in safety cases. In: Safety-Critical Systems Symposium (2010)","DOI":"10.1007\/978-1-84996-086-1_1"},{"key":"2_CR43","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"304","DOI":"10.1007\/978-3-319-10061-6_20","volume-title":"New Frontiers in Artificial Intelligence","author":"J Rushby","year":"2014","unstructured":"Rushby, J.: Mechanized support for assurance case argumentation. In: Nakano, Y., Satoh, K., Bekki, D. (eds.) JSAI-isAI 2013. LNCS, vol. 8417, pp. 304\u2013318. Springer, Heidelberg (2014). doi:\n                      10.1007\/978-3-319-10061-6_20"},{"key":"2_CR44","unstructured":"Torlak, E.: Constraint solver for software engineering: finding models and cores of large relational specifications. Ph.D. thesis, Massachusetts Institute of Technology, Cambridge (2009). AAI0821754"},{"key":"2_CR45","doi-asserted-by":"crossref","unstructured":"Torlak, E., Bodik, R.: Growing solver-aided languages with Rosette. In: Proceedings of the 2013 ACM International Symposium on New Ideas. New Paradigms, and Reflections on Programming & Software, Onward! 2013, Indianapolis, IN, pp. 135\u2013152 (2013)","DOI":"10.1145\/2509578.2509586"},{"key":"2_CR46","doi-asserted-by":"crossref","unstructured":"Torlak, E., Bodik, R.: A lightweight symbolic virtual machine for solver-aided host languages. In: Proceedings of the 2014 ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI), Edinburgh, UK, pp. 530\u2013541, June 2014","DOI":"10.1145\/2666356.2594340"},{"key":"2_CR47","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"632","DOI":"10.1007\/978-3-540-71209-1_49","volume-title":"Tools and Algorithms for the Construction and Analysis of Systems","author":"E Torlak","year":"2007","unstructured":"Torlak, E., Jackson, D.: Kodkod: a relational model finder. In: Grumberg, O., Huth, M. (eds.) TACAS 2007. LNCS, vol. 4424, pp. 632\u2013647. Springer, Heidelberg (2007)"},{"key":"2_CR48","unstructured":"Weinstock, C., Goodenough, J., Hudak, J.: Dependability cases. Technical report CMU\/SEI-2004-TN-016, Software Engineering Institute, Carnegie Mellon University, Pittsburgh (2004)"},{"key":"2_CR49","doi-asserted-by":"crossref","unstructured":"Xie, Y., Aiken, A.: Saturn: a scalable framework for error detection using Boolean satisfiability. ACM Trans. Program. Lang. Syst. (2007)","DOI":"10.1145\/1232420.1232423"}],"container-title":["Lecture Notes in Computer Science","Computer Aided Verification"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-319-41540-6_2","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2020,7,14]],"date-time":"2020-07-14T00:06:32Z","timestamp":1594685192000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-319-41540-6_2"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2016]]},"ISBN":["9783319415390","9783319415406"],"references-count":49,"URL":"https:\/\/doi.org\/10.1007\/978-3-319-41540-6_2","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2016]]},"assertion":[{"value":"13 July 2016","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"CAV","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Computer Aided Verification","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Toronto","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Canada","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2016","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"17 July 2016","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"23 July 2016","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"28","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"cav2016","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"This content has been made available to all.","name":"free","label":"Free to read"}]}}